Preventing a non-head end based service provider from sending media to a media processing system

ABSTRACT

Systems and methods that prevent unauthorized access in a communications network are provided. In one embodiment, a system that prevents unauthorized access to a network device may include, for example, a network device and a headend. The headend may be coupled to a communications network. The network device may be deployed in a home environment and may be communicatively coupled to the communications network via the headend. The headend may be adapted, for example, to determine whether a request to access the network device is authorized.

CROSS-REFERENCE TO RELATED APPLICATIONS

The present application is a CONTINUATION of U.S. application Ser. No.10/672,737, filed Sep. 26, 2003, which makes reference to, claimspriority to and claims benefit from U.S. Application No. 60/466,946,entitled “Preventing a Non-Head End Based Service Provider from SendingMedia to a Media Processing System” and filed on Apr. 30, 2003; U.S.Application No. 60/457,179, entitled “Server Architecture Supporting aPersonal Media Exchange Network” and filed on Mar. 25, 2003; U.S.Application No. 60/464,697, entitled “Secure Linking with Authenticationand Authorization in a Media Exchange Network” and filed on Apr. 23,2003; U.S. Application No. 60/465,982, entitled “Secure Anonymity in aMedia Exchange Network” and filed on Apr. 28, 2003; U.S. Application No.60/432,472, entitled “Personal Inter-Home Media Exchange Network” andfiled on Dec. 11, 2002; and U.S. Application No. 60/443,894, entitled“Access and Control of Media Peripherals Via a Media Processing System”and filed on Jan. 30, 2003. The above-identified applications are herebyincorporated herein by reference in their entirety.

In addition, said U.S. application Ser. No. 10/672,737 makes referenceto U.S. application Ser. No. 10/657,390, entitled “Personal Inter-HomeMedia Exchange Network” and filed on Sep. 8, 2003; and U.S. applicationSer. No. 10/660,267, entitled “Personal Access and Control of MediaPeripherals on a Media Exchange Network” and filed on Sep. 11, 2003. Thecomplete subject matter of the above-identified applications are herebyincorporated herein by reference in their entirety.

The above-identified applications are hereby incorporated herein byreference in their entirety.

FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT

[Not Applicable]

SEQUENCE LISTING

[Not Applicable]

MICROFICHE/COPYRIGHT REFERENCE

[Not Applicable]

BACKGROUND OF THE INVENTION

Communication in a personal computer (PC) based environment havingInternet connectivity is typically established based on e-mail addressesand/or Internet protocol (IP) addresses. Many unwanted connections occurwith no anonymity or control over who communicates with whom.

A user of a PC may receive many unwanted e-mail messages with fileattachments (e.g., SPAM) because the user's e-mail address is widelydistributed or published somewhere. Some of the e-mail messages maycontain computer viruses that can hurt the user's PC. Many businessesand some individual users set up firewalls to prevent certain types ofe-mail messages from getting through, especially those e-mail messageshaving computer viruses. However, in general, e-mail messages flowacross the Internet without the performance of any type of authorizationor authentication.

A cable service provider or a satellite service provider may authorizewhich channels to broadcast and/or to be de-encrypted by a particularuser based on the subscription information for that user. In general, aset-top box in a user's home receives whatever is broadcast to it basedon the subscription of the user. A service provider could temporarilyoverride the subscription limits and broadcast certain channels to auser's set-top box to let the user try those channels out. In reality,the user essentially has no control of what channels may be broadcast tohim.

In general, when dealing with IP-based networks and communicationthrough devices that have IP addresses, sharing any kind of digitalmedia invites or facilitates different ways for rogue service providersor rogue networks to be formed to imitate and to copy legitimateservices on the network.

Further limitations and disadvantages of conventional and traditionalapproaches will become apparent to one of skill in the art, throughcomparison of such systems with the present invention as set forth inthe remainder of the present application with reference to the drawings.

BRIEF SUMMARY OF THE INVENTION

Aspects of the present invention may be found in, for example, systemsand methods that prevent unauthorized access in a communicationsnetwork. In one embodiment, the present invention may provide a systemthat prevents unauthorized access to a network device. The system mayinclude, for example, a network device and a headend. The headend may becoupled to a communications network. The network device may be deployedin a home environment and may be communicatively coupled to thecommunications network via the headend. The headend may be adapted, forexample, to determine whether a request to access the network device isauthorized.

In another embodiment, the present invention may provide a method thatprevents unauthorized access in a communications network. The method mayinclude, for example, one or more of the following: receiving, at aheadend, a request to access a first device, the request originatingfrom a second device; determining, by the headend, whether the seconddevice is authorized to access the first device; and blocking the seconddevice from accessing the first device if the headend determines thatthe second device is not authorized to access the first device.

In yet another embodiment, the present invention may provide a methodthat prevents unauthorized access in a communications network. Themethod may include, for example, one or more of the following: disposinga headend between a first network device and a second network devicesuch that a communications path between the second network device andthe first network device passes through the headend; and adapting theheadend to determine whether the second device is authorized to accessthe first device.

These and other advantages, aspects and novel features of the presentinvention, as well as details of an illustrated embodiment thereof, willbe more fully understood from the following description and drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram illustrating an embodiment of a media exchangenetwork preventing a non-headend based service provider from sendingmedia to a device on a media exchange network, in accordance withvarious aspects of the present invention.

FIG. 2 is a diagram illustrating an embodiment of a media exchangenetwork clearly showing the resultant media exchange headends whichincorporate the functionality of the media exchange server of FIG. 1into the broadband access headends of FIG. 1, in accordance with variousaspects of the present invention.

FIG. 3 is a schematic block diagram of a first exemplary media exchangenetwork in accordance with an embodiment of the present invention.

FIG. 4 is a schematic block diagram of performing personal mediaexchange over a second exemplary media exchange network in accordancewith an embodiment of the present invention.

FIG. 5 is a schematic block diagram of performing third-party mediaexchange over a third exemplary media exchange network in accordancewith an embodiment of the present invention.

FIG. 6 is an exemplary illustration of a TV guide channel user interfacein accordance with an embodiment of the present invention.

FIG. 7 is an exemplary illustration of several instantiations of a TVguide channel user interface of FIG. 4 in accordance with an embodimentof the present invention.

FIG. 8 is an exemplary illustration of a TV guide channel user interfaceshowing several options of a pushed media in accordance with anembodiment of the present invention.

FIG. 9A is a schematic block diagram of a media processing system (MPS)interfacing to media capture peripherals in accordance with anembodiment of the present invention. FIG. 9B illustrates an embodimentof an MPS in accordance with the present invention.

FIG. 10 is a schematic block diagram of a PC and an MPS interfacing to aserver on a media exchange network in accordance with an embodiment ofthe present invention.

FIG. 11 is a schematic block diagram of a PC interfacing to personalmedia capture devices and remote media storage on a media exchangenetwork in accordance with an embodiment of the present invention.

DETAILED DESCRIPTION OF THE INVENTION

FIG. 1 is a diagram illustrating an embodiment of a media exchangenetwork 100 preventing a rogue service provider from sending media to adevice on a media exchange network, in accordance with various aspectsof the present invention. Specifically, the media exchange network 100is a communication network comprising a personal computer (PC) 101 and amedia processing system (MPS) 102 at a 1^(st) home 104; and a PC 105 andan MPS 106 at a 2^(nd) home 108. The PC 101 and the MPS 102 interface toa broadband access headend 109. The broadband access headend 109 maycomprise at least one of a cable headend, a satellite headend and a DSLheadend, in accordance with various embodiments of the presentinvention. The PC 101 and the MPS 102 may include internal modems (e.g.,a cable modem or a digital subscriber line (DSL) modem) or otherinterface devices to communicate with the broadband access headend 109.Optionally, the interface device (e.g., a modem) may be external to thePC 101 and the MPS 102.

Similarly, the PC 105 and the MPS 106 interface to a broadband accessheadend 110. The broadband access headend 110 may comprise at least oneof a cable headend, a satellite headend and a DSL headend, in accordancewith various embodiments of the present invention. The PC 105 and theMPS 106 may include internal modems (e.g., a cable modem or a DSL modem)or other interface device to communicate with the broadband accessheadend 110. Optionally, the interface device (e.g., a modem) may beexternal to the PC 105 and the MPS 106.

In accordance with various embodiments of the present invention, an MPSmay comprise at least one of a set-top box (STB), a PC and a television(TV) with a media management system (MMS). An MMS is also known hereinas a media exchange software (MES) platform.

An MMS comprises a software platform operating on at least one processorto provide certain functionality including user interface functionality,distributed storage functionality and networking functionality. Forexample, an MMS may provide control of media peripheral devices, statusmonitoring of media peripheral devices and inter-home MPS routingselection, in accordance with an embodiment of the present invention.

The media exchange network 100 further comprises a legitimate 3^(rd)party media server 112 and the functionality of a media exchange server113 (e.g., as in the case of a single central server supporting themedia exchange network 100) integrated into the broadband accessheadends 109 and 110. The broadband access headend 109, the broadbandaccess headend 110, the legitimate 3^(rd) party media server 112 and themedia exchange server 113 connect to the Internet infrastructure 115.

The legitimate 3^(rd) party media server 112 may comprise any of anumber of providers of digital media including an on-demand movieprovider, an advertiser and an on-demand music provider and is alegitimate service provider on the media exchange network 100. The3^(rd) party media server 112 may store movies, video, user profiles andother digital media that may be provided to users of the media exchangenetwork 100.

The media exchange network 100 also comprises a media storage server 116interfacing to the Internet infrastructure 115. The media storage server116 interacts with the media exchange server 113 and provides temporarystorage and/or archival storage for digital media on the media exchangenetwork 100. For example, the media storage server 116 may temporarilyhold media files that are addressed to certain MPS's and/or PC's on themedia exchange network 100.

The media exchange network 100 further comprises a rogue serviceprovider 117 that interfaces to the Internet infrastructure 115 butattempts to circumvent the security and anonymity features of the mediaexchange network 100 to push media to the MPS's and PC's on the mediaexchange network 100 without authorization. A rogue service provider maybe defined as, for example, an illegitimate 3^(rd) party serviceprovider that attempts to push media to devices on a media exchangenetwork even though those devices do not desire the media.

The media exchange server functionality, which may be incorporated, atleast in part, into the broadband access headends, includes device IPaddress registration, device ID registration, channel/program setup andmanagement, serving as a proxy for anonymity, digital rights management,media caching/storage, and billing/tracking. When the functionality of amedia exchange server is integrated into a broadband access headend, thebroadband access headend may then be considered a media exchangeheadend.

FIG. 2 is a diagram illustrating an embodiment of a media exchangenetwork 120 clearly showing the resultant media exchange headends 121and 122 which incorporate the functionality of the media exchange server113 of FIG. 1 into the broadband access headends 109 and 110 of FIG. 1,in accordance with various aspects of the present invention. The mediaexchange network 120 is equivalent to the media exchange network 100 ofFIG. 1, except the media exchange server 113 is not shown since thefunctionality of the media exchange server 113 has been incorporatedinto the broadband access headends 109 and 110 resulting in the mediaexchange headends 121 and 122.

The media exchange network 120, with the functionality of the mediaexchange server 113 incorporated into the headends 121 and 122, solvesthe problem of preventing a rogue service provider 117 from gainingaccess to a PC or an MPS on the media exchange network 100 via theInternet infrastructure 115 and a broadband access headend.

The various elements of the media exchange network 120 include storagelocations for digital media and data. The storage locations maycomprise, for example, hard disk drives, a DVD player, a CD player,floppy disk drives, RAM or any combination of these. The storagelocations may also include, for example, memory sticks, PCMCIA cards,compact flash cards or any combination of these.

The PC's (101 and 105) may comprise desktop PC's, notebook PC's, PDA'sor any computing device.

In some embodiments of the present invention, the MPS's (102 and 106)are essentially enhanced set-top boxes. The MPS's (102 and 106) may eachinclude a TV screen for viewing and interacting with various userinterfaces, media, data and services that are available on the mediaexchange network using, for example, a remote control. The PC's 101 and105 may each include a PC monitor for viewing and interacting withvarious user interfaces, media, data and services that are available onthe media exchange network using, for example, a keyboard and mouse. TheMPS's (102 and 106) and PC's (101 and 105) include functional softwareto support interaction with the media exchange headends 121 and 122 onthe media exchange network 120, in accordance with various embodimentsof the present invention.

Other embodiments of the present invention may comprise variouscombinations and/or multiple instantiations of the elements of FIG. 2,in accordance with various aspects of the present invention, includingmedia peripheral devices such as, for example, digital cameras, digitalcamcorders, MP3 players, etc.

Referring to FIG. 1, if the functionality of the media exchange serveris truly provided by a separate central server 113 and if the broadbandaccess headends do not include any functionality of the media exchangeserver 113, then a rogue service provider might be able to circumventthe security and anonymity features of the media exchange network 100provided by the media exchange server 113. The rogue service provide maythen be able, for example, to access media in (e.g., to push media to)the MPS's and PC's on the media exchange network 100 withoutauthorization.

Without the functionality of the media exchange server within theheadends, the broadband access headends 109 and 110 would just bephysical plants providing broadband access to devices on the mediaexchange network and would not have any information about the kind ofdata or media being passed through the headends. Since the mediaexchange network 100 may be IP-based, the rogue service provider 117 maybe able to intercept an IP address and to push media to, for example,the MPS 106 (e.g., even though the MPS 106 does not desire media fromthe rogue service provider 117) via the Internet infrastructure 115 andthe broadband access headend 110, without authorization from the mediaexchange server 113. A device on the media exchange network (e.g., anMPS or a PC) has a device ID and an IP address. By having thefunctionality of the media exchange server within the headend, trafficon the media exchange network can be controlled. A rogue serviceprovider may not connect to an MPS, for example, without the knowledgeof the headend.

By incorporating the functionality of the media exchange server 113 intothe broadband access headends 109 and 110 resulting in the mediaexchange headends 121 and 122, the rogue service provider 117 may beprevented from accessing, for example, the MPS 106. The functionality ofthe media exchange server in the media exchange headends prevents therogue service provider 117 from gaining access to the MPS 106 on themedia exchange network 120. The media exchange headends 121 and 122 usethe various techniques of registration, authentication, digital rightsmanagement and billing as described in, for example, U.S. PatentApplication Ser. No. 60/457,179 filed on Mar. 25, 2003, U.S. PatentApplication Ser. No. 60/464,697 filed on Apr. 23, 2003, and U.S. PatentApplication Ser. No. 60/465,982 filed on Apr. 28, 2003 to prevent therogue service provider 117 from pushing media to a device on the mediaexchange network 120. The complete subject matter of theabove-identified applications are hereby incorporated herein byreference in their entirety

In accordance with various embodiments of the present invention,multiple rogue service providers may be prevented from gaining access todevices on a media exchange network by incorporating functionality of amedia exchange server into multiple broadband access headends.

As an alternative embodiment of the present invention, the mediaexchange server functionality may be in a separate, central server onthe media exchange network (i.e., outside of the headend). A rogueservice provider may be prevented from accessing a device (e.g., an MPSor a PC) on the media exchange network by the media exchange server. Insuch an embodiment of the present invention, the media exchange serveruses authentication and encryption techniques, as described in, forexample, U.S. Patent Application Ser. No. 60/464,697 filed on Apr. 23,2003, to counter the rogue service provider.

A substantial challenge is to be able to transfer and share manydifferent types of digital media, data and services between onedevice/location and another with ease while being able to index, manageand store the digital media and data.

For example, it is desirable to be able to distribute and store manytypes of digital media in a PC and/or a television environment in auser-friendly manner without using many different types of softwareapplications and/or unique and dedicated interfaces. Any networkingissues or other technical issues should be transparent to the users. Itis also desirable to take advantage of existing hardware infrastructure,as much as possible, when providing such capability.

In an embodiment of the present invention, a media exchange network isprovided that enables many types of digital media, data and/or servicesto be stored, indexed, viewed, searched for, pushed from one user toanother and requested by users via a TV channel guide look-and-feel userinterface. The media exchange network also allows a user to constructpersonal media channels that comprise personal digital media (e.g.,captured digital pictures, digital video, digital audio, etc.), requestthat third-party media channels be constructed from third-party digitalmedia and access the media channels pushed to him by other users on themedia exchange network.

PC's may be used but are not required to interface to the media exchangenetwork for the purpose of exchanging digital media, data and services.Instead, set-top boxes or integrated MPS's may be used with the mediaexchange network to perform all of the previously described mediaexchange functions using a remote control with a television screen.

Current set-top boxes may be software enhanced to create an MPS thatprovides full media exchange network interfacing and functionality via aTV screen with a TV guide look-and-feel. PC's may be software enhancedas well and provide the same TV guide look-and-feel. Therefore, themedia exchange network supports both PC's and MPS's in a similar manner.Alternatively, a fully integrated MPS may be designed from the groundup, having full MPS capability.

In the case of an MPS configuration, the user takes advantage of hisremote control and TV screen to use the media exchange network. In thecase of a PC configuration, the user takes advantage of his keyboardand/or mouse to use the media exchange network.

An MPS or enhanced PC is effectively a storage and distribution platformfor the exchange of personal and third party digital media, data andservices as well as for bringing the conventional television channels toa user's home. An MPS and/or a PC connects to the media exchange networkvia an existing communication infrastructure which may include cable,DSL, satellite, etc. The connection to the communication infrastructuremay be hard-wired or wireless.

The media exchange network allows users to effectively become their ownbroadcasters from their own homes by creating their own media channelsand pushing those media channels to other authorized users on the mediaexchange network, such as friends and family members.

FIG. 3 illustrates a media exchange network 300 for exchanging andsharing digital media, data and services in accordance with anembodiment of the present invention. The media exchange network 300 is asecure, closed network environment that is only accessible topre-defined users and service providers. The media exchange network ofFIG. 3 comprises a first PC 301 and a first MPS 302 at a user's home303, a communication infrastructure 304, an external processing hardwaresupport 305, a remote media storage 306, a second PC 307 at a remotelocation 308 such as an office, and a second MPS 309 at a parent's home310.

The PC's 301 and 307 and the MPS's 302 and 309 each include a mediaexchange software (MES) platform 311 and a networking component 312 forconnectivity. The MES platform 311 provides multiple capabilitiesincluding media “push” capability, media “access” capability, mediachannel construction/selection, image sequence selection, text and voiceoverlay, channel and program naming, inter-home routing selection,authorship and media rights management, shared inter-home mediaexperience, billing service and an integrated TV channel guidelook-and-feel.

The external processing hardware support 305 comprises at least oneserver such as a centralized internet server, a peer-to-peer server or acable head end. The server may alternatively be distributed over varioushosts or remote PC's. The MES platform 311 may also reside on theexternal processing hardware support server 305. The remote mediastorage 306 may comprise user media storage and distribution systems 313and/or third party media storage and distribution systems 314.

The communication infrastructure 304 may comprise at least one of aninternet infrastructure, a satellite infrastructure, a cableinfrastructure, a dial-up infrastructure, a cellular infrastructure, anxDSL infrastructure, an optical infrastructure or some otherinfrastructure. The communication infrastructure 304 links the user'shome 303, the parent's home 310, the remote media storage 306 and theremote location office 308 to each other (i.e., the communicationinfrastructure 304 links all users and service providers of the mediaexchange network 300).

The various functions 315 of the media exchange network 300 comprisegenerating personal network associations, personal storage management,media capture device support, security/authentication/authorizationsupport, authorship tracking and billing and address registration andmaintenance. These media exchange management functions 315 may bedistributed over various parts of the media exchange network 300. Forexample, the personal network associations and personal storagemanagement functions may be integrated in the PC 301 at the user's home303.

FIG. 4 illustrates an example of a personal media exchange over a mediaexchange network 400 in accordance with an embodiment of the presentinvention. In step 1, the media exchange software (MES) platform 401 isused to construct personal media channels on a PC 402 by a user at “myhouse” 403. For example, with various media stored on the PC 402 such asdigital pictures 404, videos 405, and music 406, the MES platform 401allows the digital media to be organized by a user into several channelshaving a TV channel guide look-and-feel user interface 407 on the PC402.

In step 2, the user at “my house” 403 pushes a media channel 408 (e.g.,“Joe's Music”) to “brother's house” 409 and pushes two media channels410 and 411 (e.g., “Vacation Video” and “Kid's Pictures”) to “Mom'shouse” 412 via a peer-to-peer server 413 over the internet-based mediaexchange network 400. “Brother's house” 409 includes a first MPS 414connected to the media exchange network 400. “Mom's house” 412 includesa second MPS 415 connected to the media exchange network 400. The MPS's414 and 415 also provide a TV channel guide look-and-feel user interface407.

In step 3, brother and/or Mom access the pushed media channels via theirrespective media processing systems (MPS's) 414 and 415 using theirrespective MPS TV screens and remote controls.

FIG. 5 illustrates an example of a third-party media exchange over amedia exchange network 500 in accordance with an embodiment of thepresent invention. In step 1, a PC-initiated third-party request is madeby a first party 501 via an Internet-based media exchange network 500using a TV channel guide look-and-feel user interface 502 on a PC 503.In step 2, an anonymous delivery of the requested third-party channel504 is made to a second party 505 via the Internet-based media exchangenetwork 500. In step 3, the second party 505 accesses the third-partychannel 504 using a TV channel guide look-and-feel user interface 506 ona TV screen 507 that is integrated into an MPS 508.

Similarly, in step A, an MPS-initiated third-party request is made by asecond party 505 via an Internet-based media exchange network 500 usinga TV channel guide look-and-feel user interface 506 on a TV screen 507using a remote control 509. The second party 505 may key in a code,using the remote control 509, that is correlated to a commercial or someother third party broadcast media. In step B, an anonymous delivery ofthe requested third-party channel 504 is made to a first party 501 viathe internet-based media exchange network 500. In step C, the firstparty 501 accesses the third-party channel 504 using a TV channel guidelook-and-feel user interface 502 on a PC 503.

FIG. 6 illustrates a TV channel guide user interface 600 in accordancewith an embodiment of the present invention. The TV channel guide userinterface 600 may be displayed on a TV screen 608 and controlled by aremote control device 609. Also, the TV channel guide user interface 600may be displayed on a PC monitor and controlled by a keyboard or mouse.

The TV channel guide user interface 600 may be configured not only forconventional TV channels but also for personal media channels 601 thatare constructed by a user of a media exchange network, friend's andfamily's media channels 602 constructed by friends and family, and thirdparty channels 603 that are constructed by third parties either uponrequest by a user of a media exchange network or based on a profile of auser.

The personal media channels 601 may include, for example, a “familyvacations channel”, a “kid's sports channel”, a “my life channel”, a“son's life channel”, a “my music channel”, and a “kid's music channel”.The friends and family media channels 602 may include, for example, a“brother's channel”, a “Mom's channel”, and a “friend's channel”. Thethird party media channels 603 may include, for example, a “Sears Fallsale channel” and a “car commercials channel”.

Each media channel may correspond to a schedule 604 showing, forexample, a week 605 and a year 606. For example, under the “kid's sportschannel”, Ty's soccer game could be scheduled to be viewed on Tuesday ofthe current week 605 and current year 606. For each media channel, asub-menu 607 allows for selection of certain control and accessfunctions such as “play”, “send to list”, “send to archive”, “confirmreceipt”, “view”, “purchase” and “profile”.

FIG. 7 illustrates possible multiple instantiations of a TV channelguide user interface 700 in accordance with an embodiment of the presentinvention. The TV channel guide user interface 700 may be viewed with aschedule having formats of, for example, “month, year”, “week#, year”,“day, week#” or “hour, day”.

Referring to FIG. 8, a user of a media exchange network may push a mediachannel (e.g., “Vacation in Alaska Video”) to a friend who is on thesame media exchange network. The TV channel guide user interface 800 maygive the friend several options 801 for accepting and downloading thepushed media in accordance with an embodiment of the present invention.

For example, a first, most expensive option 803 may be “ExpressDelivery” which would deliver the pushed media to the friend in 18minutes using queuing and cost $1.20, for example. The pushed media maybe stored in a file in an MPEG 2 format that was recorded at a rate of 4Mbps, for example. Queuing comprises buffering and delivering a previouspart of the media and then buffering and delivering a next part of themedia. For example, a first six minutes of the “Vacation in AlaskaVideo” may be buffered and delivered first, then a second six minutesmay be buffered and delivered next, and so on until the entire media isdelivered.

A second, less expensive option 802 may be “Normal Delivery” which woulddeliver the pushed media in 2 hours and 13 minutes without queuing andcost $0.59, for example. The pushed media may be stored in a file in anMPEG 2 format that was recorded at a rate of 1.5 Mbps, for example.

A third, least expensive option 804 may be “Overnight Delivery” whichwould deliver the pushed media by the next morning and cost only $0.05,for example. The pushed media may be stored in a file in an MPEG 2format that was recorded at a rate of 19 Mbps and stored on a server,for example.

FIG. 9A illustrates some elements of a media processing system (MPS) 900and media capture devices 901 in accordance with an embodiment of thepresent invention. The media capture devices 901 may comprise audio,video, and image players, such as digital cameras, digital camcorders,and MP3 players, that each include a temporary storage area 902 and acommunication interface 903 such as, for example, a USB interface or awireless interface. The media capture devices 901 have the capability tointerface to an MPS and a PC.

The MPS 900 comprises a media processing unit (MPU) 904, remote userinterface(s) 905, and a TV screen 918 to provide integrated mediaprocessing capability and indirect user interface capability. The remoteuser interfaces 905 may comprise a voice or keyed remote control 906,keyboards and pads 907, a remote PC access interface 908 and a remotemedia system access interface 909 (i.e., providing access from anotherMPS).

The media processing unit (MPU) 904 comprises TV and radio tuners 910for image and audio consumption, communications interfaces 911, channelprocessing 912 (e.g., creating, storing, indexing and viewing), storage913, media players 914 (e.g., CD players, DVD players, tape players,PVRs and MP3 players), an integrated user interface 915 (to provide a TVchannel guide look-and-feel, for example), networking components 916 toprovide client functions such as consumption (e.g., billing),authorization (e.g., using digital certificates and digital ID's),registration, security and connectivity. In an alternative embodiment ofthe present invention, the networking components 916 may include adistributed server element 917 that is part of a distributed server.

FIG. 9B illustrates an embodiment of a media processing system (MPS) 920in accordance with various aspects of the present invention. The MPS 920is essentially an enhanced set-top box for viewing and interacting withvarious user interfaces, media, data and services that are available onthe media exchange network using, for example, a remote control. The MPS920 comprises a media peripheral 921, a media management system (MMS)922 and a broadband communication interface 923.

The media peripheral 921 may include a TV, a PC and media players (e.g.,a CD player, a DVD player, a tape player and a MP3 player) for video,image and audio consumption of broadcast channels and/or personalchannels. The broadband communication interface 923 may include internalmodems (e.g., a cable modem or a DSL modem) or other interface devicesin order to communicate with, for example, a cable or satellite headend.

The MMS 922 includes a software platform to provide functionalityincluding media “push” capability, media “access” capability, mediachannel construction/selection, image sequence selection, text and voiceoverlay, channel and program naming, inter-home routing selection,authorship and media rights management, shared inter-home mediaexperience, billing service and a media guide user interface providingan integrated TV channel guide look-and-feel.

FIG. 10 illustrates connectivity between a PC 1000, an MPS 1001 and anexternal processing hardware 1002 (e.g., a server) in accordance with anembodiment of the present invention. The PC 1000 and the MPS 1001include networking components 1003 to provide client functions such asconsumption (e.g., billing), authorization, registration, security andconnectivity. Alternatively, the PC 1000 and the MPS 1001 may include adistributed server element 1004 that is part of a distributed server.

The PC 1000 and the MPS 1001 connect to the external processing hardware1002 via wired connections or wireless connections. The externalprocessing hardware 1002 comprises a distributed server or apeer-to-peer server. The external processing hardware 1002 alsocomprises communication interfaces 1005 (e.g., cable interfaces, opticalinterfaces, etc.) and a media exchange software (MES) platform 1006. TheMES platform 1006 in the external processing hardware 1002 allows forcommunication with the PC 1000 and the MPS 1001 which may also use thesame MES platform 1006. The external processing hardware 1002 alsoincludes networking server components 1007 to provide the similar clientfunctions such as consumption (e.g., billing), authorization,registration, security and connectivity at the server side.

FIG. 11 illustrates connectivity between a PC 1100, a remote mediastorage 1101 and personal media capture devices 1102 when the PC 100 isused as the primary distributor of digital media such as in the case ofPC-to-PC operation, in accordance with an embodiment of the presentinvention. The personal media capture devices 1102 and the remote mediastorage 1101 connect to the PC 1100 via a wireless connection or a wiredconnection. The remote media storage 1101 provides user media storageand distribution 1103 as well as third party media storage anddistribution 1104. The personal media capture devices 1102 providetemporary storage 1114 and communication interfaces 1115.

Viewing is done using a PC monitor 1105 instead of a television screen.The PC 1100 may include storage 1106, TV/radio tuners 1107 for mediaconsumption, media players 1108, and communication interfaces 1109 anduser interfaces 1110 similar to those for the MPS of FIG. 9. The PC 1100includes a media exchange software (MES) platform 1111 that provideschannel construction capability 1112 and networking capability 1113. Thechannel construction capability 1112 allows third party and personalmedia access, sequencing, editing, media overlays and inserts, billing,scheduling and addressing.

In summary, some embodiments of the present invention provide systemsand methods to provide secure anonymity of devices on a media exchangenetwork.

While the present invention has been described with reference to certainembodiments, it will be understood by those skilled in the art thatvarious changes may be made and equivalents may be substituted withoutdeparting from the scope of the present invention. In addition, manymodifications may be made to adapt a particular situation or material tothe teachings of the present invention without departing from its scope.Therefore, it is intended that the present invention not be limited tothe particular embodiments disclosed, but that the present inventionwill include all embodiments falling within the scope of the appendedclaims.

1. In a system that prevents unauthorized access to a network device, the system comprising a network device, a cable television headend and a communications network, the cable television headed being coupled to the communications network, the cable television headend being adapted to determine whether a request to access the network device is authorized, the network device comprising: at least one of a computer, a storage device, set-top box circuitry, a television, a display and/or a remote control, wherein the network device is deployed in a home environment and communicatively coupled to the communications network via the cable television headend; and wherein the cable television headend is adapted to determine whether a particular service provider, which is seeking access to the network device, is authorized to send data to the network device.
 2. The network device according to claim 1, wherein the cable television headend is adapted to perform at least one of the following: Internet protocol registration, identification registration and/or digital rights management.
 3. The network device according to claim 2, wherein the cable television headend is adapted to perform at least one of the following: channel/program set up, channel/program management, anonymous proxy services, media caching, media storage, billing and/or tracking.
 4. The network device according to claim 3, wherein the cable television headend is adapted to process at least one of the following: a device identification, an IP address, a digital certificate and/or a key.
 5. The network device according to claim 4, wherein the cable television headend is adapted to store at least one of the following: a device identification, a public key, a hashing signature and/or an IP address.
 6. The network device according to claim 1, wherein the cable television headend is adapted to prevent unauthorized data from reaching the network device.
 7. The network device according to claim 6, wherein the data is received by the cable television headend from the communications network.
 8. The network device according to claim 1, wherein the cable television headend is adapted to employ at least one of the following: authentication techniques, encryption techniques and/or decryption techniques.
 9. The network device according to claim 1, wherein the cable television headend is adapted to facilitate pushing a file residing in an authorized device to the network device and/or to a storage device coupled to the network device.
 10. The network device according to claim 9, wherein the pushed file is transported through the cable television headend to the network device and/or to the storage device coupled to the network device.
 11. The network device according to claim 1, the system comprising a service provider coupled to the communications network and attempting to access the network device via the cable television headend, wherein the service provider provides at least one of a password and/or a code to the cable television headend so that the cable television headend can determine whether the service provider is authorized to access the network device.
 12. The network device according to claim 1, wherein the communications network comprises an Internet-protocol-based communications network.
 13. The network device according to claim 1, wherein the cable television headend comprises at least one of the following: a cable headend, a satellite headend and/or a digital subscriber line headend.
 14. The network device according to claim 1, wherein the cable television headend is adapted to provide at least some of the functionality of a media exchange server.
 15. The network device according to claim 1, wherein the cable television headend is adapted to perform at least one of the following: channel/program set up, channel/program management, anonymous proxy services, media caching, media storage, billing and/or tracking.
 16. The network device according to claim 1, wherein the cable television headend is adapted to process at least one of the following: a device identification, an Internet protocol address, a digital certificate and/or a key.
 17. The network device according to claim 1, wherein the cable television headend is adapted to store at least one of the following: a device identification, a public key, a hashing signature and/or an Internet protocol address.
 18. The network device according to claim 1, wherein the cable television headend is deployed outside of the home environment of the network device.
 19. The network device according to claim 18, wherein the communications network is external to the cable television headend, the network device and any other network communicatively disposed between the cable television headend and the network device.
 20. The network device according to claim 19, wherein the cable television headend comprises a satellite cable television headend.
 21. The network device according to claim 19, wherein the cable television headend comprises a digital subscriber line cable television headend.
 22. The network device according to claim 19, wherein the cable television headend comprises a cable television headend.
 23. The network device according to claim 19, wherein the cable television headend is adapted to perform channel or program set up.
 24. The network device according to claim 19, wherein the cable television headend is adapted to perform anonymous proxy services.
 25. The network device according to claim 19, wherein the cable television headend is adapted to perform billing.
 26. The network device according to claim 19, wherein the cable television headend is adapted to perform media storage.
 27. The network device according to claim 19, wherein the network device comprises a set top box and the cable television headend comprises a satellite cable television headend.
 28. The network device according to claim 19, wherein the network device comprises a set top box and the cable television headend comprises a digital subscriber line cable television headend.
 29. The network device according to claim 19, wherein the network device comprises a set top box and the cable television headend comprises a cable television headend.
 30. The network device according to claim 19, wherein the cable television headend is adapted to perform Internet protocol registration.
 31. The network device according to claim 19, wherein the cable television headend is adapted to perform identification registration.
 32. The network device according to claim 19, wherein the cable television headend is adapted to perform digital rights management.
 33. The network device according to claim 19, wherein the cable television headend is adapted to perform tracking.
 34. The network device according to claim 19, wherein the cable television headend is adapted to process a digital certificate.
 35. The network device according to claim 19, wherein the cable television headend is adapted to process a key.
 36. The network device according to claim 19, wherein the cable television headend is adapted to process a hashing signature.
 37. The network device according to claim 19, wherein the cable television headend is adapted to process an IP address and a device identification. 